upgrade to openssh 3.5. major changes include:
- krb4/5 support for privsep (krb5 diff was already applied)
includes fake implementaation of getpeereid() from openssh-portable, which
does nothing useful - need improvement.

Pull up revision 1.7 (requested by itojun in ticket #428):
make ssh-keysign read /etc/ssh/ssh_config
and exit if HostbasedAuthentication is disabled globally. based on discussions
with deraadt, itojun and sommerfeld; ok itojun@
sync w/openbsd

Pullup to HEAD as of 20020626 16:50:00 UTC (requested by itojun in ticket #379):
Update to OpenSSH 3.4.
[tv: EXCEPTION: Reverted rev 1.3 of random.h and 1.5 of random.c to bring back
the OpenSSH-private implementation of arc4random().]

sync crypto/dist/ssh with re-importorted tree. try to minimize diffs
with openssh tree to ease future upgrade. re-do local changes, including:
- prototype pedants
- IgnoreRootRhosts
- login.conf user validation
some of the local changes that weren't used are omitted for now. we may
need to revisit those afterwards.
it adds "sftp".